Spam from simbconsulting.co.za

[McGuywer]

Anyone know of simbconsulting.co.za ?

Got this spam from them:

Hello,

A domain renewal notice has been generated on your account:

Domain Name: domain.co.za
Expiration Date: 18/05/2026

Please renew your domain before expiration to avoid any service disruptions.

Log in to your Control Panel by visiting our website and selecting 'Log in' to review and pay

Effects of Non-Renewal

Late or non-renewal will result in domain deactivation and all associated services to cease.

• Website Hosting: Your website will go offline
• Email Services: Email (domain.co.za) will stop functioning
• DNS Records: All DNS configurations will cease
• Content Deletion: All associated content will be permanently deleted

Reactivation

After renewing your domain, services will be reactivated automatically. Please allow up to 24 hours for full restoration.

Renew Now
If you have any questions, please don't hesitate to contact us.

© 2026 All rights reserved

 

[repitah]

Please remove the link incase others click through and somehow fall for it.

Possibly whois scraped the domain and use a compromised business email account (common from phishing; check the mail headers and through aka.ms/mha) an sent spam to whatever they could find on that domain.

Or just straight up an email list with (script the domain name) and make it look like you will loose the domain soon if you don't pay.

Email is so easy to deceive (From: Willie Gates the 3rd <[email protected]>; reply-to: Willie Gates <[email protected]>; To: The Very Important You <whatever@doesn't.exist>; BCC: everyone on the list). A lot of email apps hide the bits in the <brackets> and most users won't right-click/hover/long-press to see the detail.

It's all a common con, like the millions of mails "from" [*pick a local delivery company*] saying you need to pay a small clearance fee, meanwhile they're just collecting card numbers that can be recycled on sites that don't have 3D-secure/similar or straight up rob you blind because you don't actually read.

Like all cons, the basics are all there. Create a sense of urgency, make the amount seemingly legit and watch the suckers roll up and give willingly.

In this case, the site/html is basic and it does a basic card check (google credit card generators for test/fake card numbers), sends it off to the remote server (php form handler) and redirects you to a void or another legit site (you gave them the data, kthxbye).